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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (currently amended) A payment management system for obtaining approval 
of an electronic fund transfer disbursement file from a user of a remote system and 
transferring the electronic fund transfer disbursement file to a payments processor, 
the payment management system comprising: 

an electronic transfer submission module for: 

generating a digest by performing a hash on the electronic fund 

transfer disbursement file; 

receiving an authorization response from the remote system; and 
transferring an electronic funds submission to the payments 
processor, the electronic funds submission comprising the electronic fund transfer 
disbursement file p aymont trancaction f i le and at least a portion of the authorization 
response comprising a digital signature; and 

~ a web server system for transferring authorization control code to the remote 
system, the authorization control code driving the remote system to perform the 

following steps: 

obtaining the digital signature of authenticated attributes, the 

authenticated attributes including the digest; and 

generating the authorization response, the authorization response 
including the digital signature. 

2. (currently amended) The payment management system of claim 1 : 

wherein the authorization control code further drives p rovidoG for the remote 
system to: 

generate additional message attributes; and 

combine the additional message attributes with the digest to generate 
the authenticated attributes; and 

2 



PAGE 5/11 * RCVD AT 11/23/2007 9:48:40 AM [Eastern Standard Time] • SVR:USPTO-EFXRF-6/14 " QMS: 2738300 " CSID:239936S775 



• DURATION <mm-ss):05-34 



02/20/2007 07:23. FAX 2399365775 



B)006 



Serial No.: 10/776-406 

the digital signature comprises a digital signature of a hash of the 
authenticated attributes. 

3. (original) The payment management system of claim 2, wherein the 
authorization control code further drives the remote system to: 

generate and pass a dummy data string to a signing component to obtain a 
dummy authentication data structure, the dummy authentication data structure 
comprising a dummy digital signature; 

pass the authenticated attributes to the signing component to obtain the 

digital signature; 

combine the digital signature with at least a portion of the dummy 
authentication data structure by replacing the dummy digital signature with the 
digital signature to generate an authentication data structure; and 

include the authentication data structure in the authorization response. 

4. (original) The payment management system of claim 3, wherein: 
the dummy data structure further comprises a dummy digest; and 

the authorization control code further drives the remote system to combine 
the digest with the dummy authentication data structure to generate the 
authentication data structure by replacing the dummy digest with the digest. 

5. (original) The payment management system of claim 4, further comprising 
log on module for authenticating the user of the remote system by: 

obtaining logon credentials identifying the user of the remote system; 
determining whether the logon credentials match those of an authorized 
user; and 

the electronic fund transfer submission module transfers the authorization 
request to the remote system only if the logon credentials match those of an 
authorized user. 
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6. (original) The payment management system of claim 5, wherein the 
electronic fund transfer submission module further authenticates the user of the 
remote system to the payments processor by: 

receiving an authentication challenge from the payments processor; 
transferring the authentication challenge to the remote system; 
receiving an authentication response from the remote system; and 
transferring the authentication response to the payments processor. 

7. (Currently Amended) An payment management system for obtaining an 
approval of an electronic fund transfer disbursement file from a user of a remote 
system and transferring the electronic fund transfer disbursement file to a 
payments processor, the payment management system comprising: 

means for generating a digest by performing a hash on the electronic fund 
transfer disbursement file; 

means for transferring the digest to the remote system; 

means lor receiving an authorization response from the remote system, the 
authorization response comprising a digital signature of authenticated attributes, 
the authenticated attributes comprising the digest; and 

means for transferring an electronic funds submission to the payments 
processor over a secure connection, the electronic funds submission comprising 
the electronic fund transfer disbursement file p aym o nt transaction f ile and at least a 
portion of the authorization response comprising the digital signature. 

8. (original) The payment management system of claim 7, wherein the remote 
system comprises means for: 

generating additional message attributes; and 

combining the additional message attributes with the digest to generate the 
authenticated attributes; and 

the digital signature comprises a digital signature of a hash of the 
authenticated attributes. 
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9. (original) The payment management system of claim 8, wherein the remote 
system further comprises means for: 

generating and passing a dummy data file to a signing component to obtain 
a dummy authentication data structure, the dummy authentication data structure 
comprising a dummy digital signature; 

passing the authenticated attributes to the signing component to obtain the 
digital signature; 

combining the digital signature with at least a portion of the dummy 
authentication data structure by replacing the dummy digital signature with the 
digital signature to generate an authentication data structure; and 

including the authentication data structure in the authorization response. 

10. (original) The payment management system of claim 9, wherein: 
the dummy data structure further comprises a dummy digest; and 
the remote system further combines the digest with the dummy 

authentication data structure to generate the authentication data structure by 
replacing the dummy digest with the digest. 

1 1 . (original) The payment management system of claim 1 0, further comprising 
means for authenticating the user of the remote system by: 

obtaining logon credentials identifying the user of the remote system; 
determining whether the logon credentials match those of an authorized 
user; and 

transferring the authorization request to the remote system occurs only if the 
logon credentials match those of an authorized user. 

12. (original) The payment management system of claim 1 1 p further comprising 
means for authenticating the user of the remote system to the payments processor 
by: 
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receiving an authentication challenge from the payments processor; 
transferring the authentication challenge to the remote system; 
receiving an authentication response from the remote system; and 
transferring the authentication response to the payments processor. 

1 3. (original) The payment management system of claim 7, further comprising a 
web server for passing authorization control code to the remote system, the 
authorization control code being at least one of executable by the remote system 
and interpretable by the remote system for driving the remote system to: 

generate additional message attributes; and 

combine the additional message attributes with the digest to generate the 
authenticated attributes; and 

the digital signature comprises a digital signature of a hash of the 
authenticated attributes. 

14, (original) The payment management system of claim 13, wherein the 
authorization control code further drives the remote system to: - 

generate and pass a dummy data file to a signing component to obtain a 
dummy authentication data structure, the dummy authentication data structure 
comprising a dummy digital signature; 

pass the authenticated attributes to the signing component to obtain the 

digital signature; 

combine the digital signature with at least a portion of the dummy 
authentication data structure by replacing the dummy digital signature with the 
digital signature to generate an authentication data structure; and 

include the authentication data structure in the authorization response. 

1 5. (original) The payment management system of claim 1 4; wherein 
the dummy data structure further comprises a dummy digest; and 
the authorization control code further drives the remote system to combine 
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the digest with the dummy authentication data structure to generate the 
authentication data structure by replacing the dummy digest with the digest. 

1 6. (original) The payment management system of claim 1 5, further comprising 
means for authenticating the user of the remote system by: 

obtaining logon credentials identifying the user of the remote system; 
determining whether the logon credentials match those of an authorized 
user; and 

transferring the authorization request to the remote system occurs only if the 
logon credentials match those of an authorized user. 

1 7. (original) The payment management system of claim 1 6, further comprising 
means for authenticating the user of the remote system to the payments processor 
by: 

receiving an authentication challenge from the payments processor; 
transferring the authentication challenge to the remote system; 
receiving an authentication response from the remote system; and^ 
transferring the authentication response to the payments processor. 
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